Volerion logoVolerion
Volerion logoVolerion

Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A vulnerability has been identified in Mozilla Firefox and Thunderbird versions prior to 137, as well as in Firefox ESR and Thunderbird ESR versions prior to 128.9. This vulnerability arises from memory safety issues that could lead to memory corruption. With sufficient effort, these issues might have been exploited to execute arbitrary code.

Impact

Exploitation of this vulnerability could have allowed for arbitrary code execution.

Remediation

Users can upgrade to Firefox 137, Thunderbird 137, Firefox ESR 128.9, or Thunderbird ESR 128.9 to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.